ekrn.exe (NOD32) using 90%+ of CPU when I visit WindowsUpdate

Soldato
Joined
7 Mar 2005
Posts
19,606
Location
LU7
As hinted in thread title, when I visit WindowsUpdate and scan for updates ekrn.exe jumps to using over 90% of my CPU.

I can fix this by disabling NOD32 temporarily but I'd like to know why this problem is occurring at all. Does anyone know what ekrn.exe is doing and what setting I could change to solve this?
 
Which version of Nod are you running, 2.7 or 3?

Have you tried uninstalling NOD, reboot, delete the eset folder if its there and redownloading the latest version from the eset site?
 
My company being a NOD32 partner, I've spoke to ESET about this problem as some of my clients are experiencing the same problems.

I spoke to ESET today and they said its a common problems since service pack 3. They were going to e-mail me over some solutions via e-mail for the morning. Ill keep you posted.
 
Do you have ThreatSense enabled?
I think so yes.

Ta. Found it earlier. :)

My company being a NOD32 partner, I've spoke to ESET about this problem as some of my clients are experiencing the same problems.

I spoke to ESET today and they said its a common problems since service pack 3. They were going to e-mail me over some solutions via e-mail for the morning. Ill keep you posted.
Hmm so SP3 is the culprit. Wait to hear what they say. :)
 
Hey Markyb. Thanks for the email. As I said Part 3 is a bit confusing. What they say in their email isn't the same as what NOD32 itself says. :p

I did kind of try Part 1, I restarted the Automatic Updates and BITS services. Now ekrn.exe seems OK during a Windows Update scan but svchost.exe now takes the cpu. :p
 
I'm on vista64 SP1, and NOD's just not updating anymore!?! I've searched their forums and this seems to have been happening to people for the last couple of months. I get the impression that the problem is at ESET's end, but they're not fixing it!?!?! It's a shame as my licence is almost up, but i have now lost faith in NOD.

Gotta find another AV now! :(
 
I'm on vista64 SP1, and NOD's just not updating anymore!?! I've searched their forums and this seems to have been happening to people for the last couple of months. I get the impression that the problem is at ESET's end, but they're not fixing it!?!?! It's a shame as my licence is almost up, but i have now lost faith in NOD.

Gotta find another AV now! :(

I had that around a month ago but for it just fixed itself around a week ago.
 
I has same issue with ESS for many builds, I had to stick with .650 till the new build the other day which seems finally sorted.

The issue was also in Nod32 and I would get 100% CPU opening Webpage or any Window on my PC to the extent the PC was unusable and it was massive delays to do anything.
 
Can post some of the solutions offered here?
http://ask-leo.com/how_do_i_fix_this_high_cpu_usage_svchost_virus_or_whatever_it_is.html

OR from my Gmail:

Part 2
For Windows XP (Vista is similar) please complete the following to
remove ALL other antivirus programs:

1. Go to the Windows Control Panel.

2. Click on "Add or Remove Programs".

3. Remove every antivirus program that you see there.

4. If you have ever had NORTON on your system at any point in time
please complete the following:

Download, SAVE and then run the Norton Removal tool for versions 2003 to
2007 use this link:
http://service1.symantec.com/support/tsgeninfo.nsf/docid/200503310816203
9?OpenDocument

After the above, please try reinstalling a FRESH copy of ESET NOD32
Antivirus 3.0 or ESET Smart Security 3.0 from our website.

Is your issue now resolved? If not, please continue below.


Part 3
For Windows XP (Vista is similar) please complete the following:

1. Click on "Start".

2. Click on "All Programs".

3. Click on "ESET".

4. Click on either "ESET NOD32 Antivirus" or "ESET Smart Security".


5. Click on "ESET NOD32 Antivirus" or "ESET Smart Security", this
will open up the ESET NOD32 Antivirus or ESET Smart Security Control
Center.

6. Click on "Setup".

7. Click on "Enter entire advanced setup tree..." or "Toggle
advanced mode".

8. In the left hand column click directly underneath "Antivirus and
antispyware", click on "Real-time file system protection.

9. Click on "Setup" (ThreatSense engine parameter setup).

10. Click on "Objects" in the left hand column.

11. Uncheck "Runtime packers" (it should be off default).

12. Click on "Options" in the left hand column.

13. Uncheck "Advanced Heuristics" (it should be off default).

14. Click on "Extensions" in the left hand column.

15. Uncheck "Scan all files".

16. Click "OK".

17. Click on "Web access protection" and expand it so you can see the
items listed beneath.

18. Click on "HTTP" and expand it so you can see the items listed
beneath.

19. Click on "Web browsers".

20. In the right hand window place an "x" against any detected
application that isn't a web-browser or e-mail client.

21. Click on "OK".

22. Close the "Control Center".

23. Reboot your computer.

Is your issue now resolved? If not, please continue below.


Part 4
If you have a Lenovo or IBM ThinkPad, please complete the following:

Exclude Lenovo and ThinkPad folders:

* C:\Program Files\ThinkPad
* C:\Program Files\Lenovo\PkgMgr
* C:\Program Files\IBM ThinkVantage

For Windows XP.

1. Click on "Start".

2. Click on "All Programs".

3. Click on "ESET".

4. Click on "ESET Smart Security".

5. Click on "ESET Smart Security", this will open up the ESET Smart
Security Control Center.

6. Click on "Setup".

7. Click on "Enter advanced setup tree" or "Toggle Advanced mode".

8. Click on Web access and expand it so you can see the entries
listed below it.

9. Click on "Exclusions".

10. Click on "Add" and then navigate to the folder or file that you
would like to exclude.

Please Note: You need to enter the exclusions like the following
filename\*.*

It is vital to have the wildcards at the end. e.g. c:\test\*.*

Is your issue now resolved? If not, please continue below.


Part 5
For Windows XP (Vista is similar) please complete the following:

Exclude Outlook Express .dbx files and Exclude any database files

Example of where to find Outlook Express .dbx files:
* C:\Documents and Settings\User\Local Settings\Application
Data\Identities\{long number
3893602D-9A86-4433-831A-8E04CE69FFF2}\Microsoft\Outlook Express

For Windows XP.

1. Click on "Start".

2. Click on "All Programs".

3. Click on "ESET".

4. Click on "ESET Smart Security".

5. Click on "ESET Smart Security", this will open up the ESET Smart
Security Control Center.

6. Click on "Setup".

7. Click on "Enter advanced setup tree" or "Toggle Advanced mode".

8. Click on Web access and expand it so you can see the entries
listed below it.

9. Click on "Exclusions".

10. Click on "Add" and then navigate to the folder or file that you
would like to exclude.

Please Note: You need to enter the exclusions like the following
filename\*.*

It is vital to have the wildcards at the end. e.g. c:\test\*.*

Is your issue now resolved? If not, please continue below.


Part 6
In this part we are going to make a complete uninstall and reinstall of
ESET software.

1. Click on "Start".

2. Click on "All Programs".

3. Click on "ESET".

4. Click on "Uninstall".

5. Reboot your computer.

6. Delete the following "ESET" folders:

C:\Program Files\ Eset
C:\Documents and Settings\All users\Application data\Eset
C:\Documents and Settings\%USER%\Application data\Eset (if listed)
C:\Documents and Settings\ %USER%\Local Settings\Application data\Eset

Please Note: In Vista the application data folder is located in
C:\Program Data

7. Click on "Start"

8. Click on "run"

9. Type in: regedit

10. Click on "OK".

11. Go to the following key and delete the ESET folder:

* HKEY_LOCAL_MACHINE Software

12. Go to the following key and delete the ESET folder:

* HKEY_CURRENT_USER Software

13. Close the Registry Editor.

14. Click on "Start"

15. Click on "My Computer".

16. Click on your "C drive"

17. Click on "Windows".

18. In the top of your current screen, click on "Tools"

19. Click on "Folder Options"

20. Click on "View" (tab).

21. Place a dot in the radio button that says "Show hidden files and
folders"

22. Remove the tick from "Hide extensions for known file types".

23. Remove the tick from "Hide protected operating system files".

24. Click on OK".

25. Go to the 'inf' folder located in C:\WINDOWS\inf

26. Delete: INFCACHE.1

27. Reinstall the latest version of ESET NOD32 Antivirus 3.0 or ESET
Smart Security 3.0
 
Last edited:
Their support sucks, they caused that issue above with a build to fix other issues.

I would not mess with any settings as you do not have to and don't let them blame your PC.

I ran a older build for many months till they got their act together.

Lets hope a Deff Update or new build does not put me back to issues again or its back to ESS .650 for me. :)
 
Their support sucks, they caused that issue above with a build to fix other issues.

I would not mess with any settings as you do not have to and don't let them blame your PC.

I ran a older build for many months till they got their act together.

Lets hope a Deff Update or new build does not put me back to issues again or its back to ESS .650 for me. :)
I got that from a non-Eset source. There is a new build of NOD on their site. I have .669 installed and .672 is out.
 
Back
Top Bottom